Brocade Communications Systems RFS6000 System Reference Manual page 170

4
Creating an Include List
Since few devices require NAC, Brocade recommends using the "bypass-nac-except-include-list"
option. Refer to the commands below to create a NAC Include List:
1. Create a NAC include list.
NOTE
The instance changes from
2. Add a host entry to the include list. This adds a specified MAC entry/MAC range into the client's
3. Associate the include list to a WLAN. This adds the client's include list into the WLAN.
Creating an Exclude List
To create a NAC Exclude List:
1. Define the NAC include list.
2. Add a host entry into the exclude list.
3. Associate the exclude list to a WLAN.
Configuring the WLAN for NAC
Many handheld devices are required to bypass NAC, and a few laptops and desktops are required
to be NAC validated.
1. Set the NAC mode for WLAN. A NAC validation is conducted for station entries in the include
2. Configure the WLAN's NAC server settings.
158
RF Switch (config-wireless) #client include-list Desktop
RF Switch (config-wireless-client-list) #
(config-wireless)
include list.
RF Switch(config-wireless-client-list) #station pc1 AA:BB:CC:DD:EE:FF
RF Switch(config-wireless-client-list) #
RF Switch(config-wireless-client-list) #wlan 1
RF Switch(config-wireless-client-list) #
RF Switch(config-wireless) #client exclude-list Desktop
RF Switch(config-wireless-client-list) #
RF Switch(config-wireless-client-list) #station pc10 AB:BC:CD:DE:EF:FA
RF Switch(config-wireless-client-list) #
RF Switch(config-wireless-client-list) #wlan 1
RF Switch(config-wireless-client-list) #
list. The station entries are authenticated using the Radius server.
RF Switch(config-wireless) #wlan 1 nac-mode bypass-nac-except-include-list
RF Switch (config-wireless) #
to
(config-wireless-client-list)
Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
.
53-1002515-01